Back to search
CVE-2024-34997
Published: May 17, 2024
Modified: Aug 27, 2024
PUBLISHED
Description
joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now